You've got more faith in F-Prot than I do. According to my logs, F-prot is missing encrypted zips that McAfee and ClamAV catch here.
----- Original Message ----- From: "John Carter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 03, 2004 2:59 PM Subject: RE: [Declude.JunkMail] Vulnerability hold conflicting with filter > But BANEXT ZIP and EZIP and BANZIPEXT are dumping into \Virus\ too. > Although F-Prot seems to be catching 100% of the infected ones, it didn't > always do so. I've been burned on that. So mixed up in \Virus\ are held > detected vulnerabilities, banned ext, and banned zips. I go in find the > legit Zips and move them back to the \spool\. Also there are the occasional > legits with vulnerabilities and they get moved back too. > > (But the vulnerability detected ones that also match a filter entry, I > definitely don't want.) > > Also per someone else's comment, I don't want to use AVAFTERJM ON either. > > John > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew > Sent: Wednesday, November 03, 2004 1:56 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [Declude.JunkMail] Vulnerability hold conflicting with filter > > John, why are you worried about viruses being held in your spam folder? If > they're held, they're effectively quarantined and the user isn't bothered by > it, just as they're not bothered by the spam in that folder. > > Please share, > > Andrew 8) > > -----Original Message----- > From: John Carter [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 03, 2004 11:51 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Vulnerability hold conflicting with filter > > > Looks like either way I have to go through 100's of held messages daily to > find that 99.9% are spam and then manually delete them. I guess I'll pull > the ol' Visual Basic out and work up a solution. > > Thanks, > John > > (Scott wrote) > Your option here would be to add a line "AVAFTERJM ON" to the > \IMail\Declude\virus.cfg file. This will force Declude JunkMail to run > first, allowing it to delete the E-mail. However, this runs the risk of > E-mail being held by Declude JunkMail -- in which case it would not be > scanned by Declude Virus. > > -Scott > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
